$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: kk6eS+Xxb+v3zn49TZ3/PaVZdNDDmJPI1vz9BQ/BqXg= Subject key identifier: 34:D1:59:E2:DE:26:32:01:B8:2D:77:D5:2A:A9:4E:FE:FF:50:C0:34 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 0DCC8448A7994EBE9DF5FC2D347106B23C6A4DBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 0113 Signing time: Thu 05 Mar 2026 21:41:55 +0000 Manifest this update: Thu 05 Mar 2026 21:36:55 +0000 Manifest next update: Sun 08 Mar 2026 23:02:55 +0000 Files and hashes: 1: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 8Vg70sDR83+R4h61BM4oF6HfBSYpvZjABNGi/+A+V20=) 2: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: j5xRnyx9ltTxdxtyDGq7eViM99V3PYzjmvt9btMBjHc=) 3: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: e5KmiwAizhYyC4bJIiESAWKcMFzSKtpVWhEKz0somO0=) 4: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cc:84:48:a7:99:4e:be:9d:f5:fc:2d:34:71:06:b2:3c:6a:4d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Mar 5 21:36:55 2026 GMT Not After : Mar 8 23:02:55 2026 GMT Subject: CN=34D159E2DE263201B82D77D52AA94EFEFF50C034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:7e:4c:08:57:d4:23:71:ba:44:90:dc:10: 44:be:66:f4:77:40:69:a5:13:77:46:89:d6:5e:cd: 4b:f4:6f:70:59:f5:ab:9a:9a:20:d2:9c:b2:cd:42: 2a:bb:38:05:da:bc:c9:87:32:43:00:98:48:ba:5b: 0d:2a:cc:41:46:3d:7d:92:7c:6a:e8:33:ae:36:5b: d0:77:1d:a6:7d:50:d7:44:94:07:76:69:09:5c:93: ac:97:bf:05:97:4a:2d:26:f3:22:82:e0:ad:44:36: 94:8e:51:12:32:44:83:90:25:92:43:23:4b:d6:61: 75:0c:f5:2a:56:60:98:ab:a4:e6:9f:b5:f4:49:ee: 30:5a:7a:d9:cf:af:30:47:3b:3a:ba:db:18:90:0c: 46:cb:cc:13:ee:8c:3d:cc:c4:64:6d:54:e8:48:d5: 78:fe:28:c2:51:3b:9c:78:a0:90:5f:ac:c1:e3:65: 5f:43:62:5a:2f:5b:bf:35:55:5f:b3:f0:72:9e:c5: 6c:f4:f6:db:b3:9c:fe:97:9e:8b:8f:75:d2:c2:16: 6e:cd:76:10:46:ca:e9:0f:ab:8d:e4:a6:fb:c9:cd: e4:30:a7:f8:ce:11:1d:a5:aa:f4:02:a8:1c:2c:44: 48:48:40:ca:c8:3f:b8:36:6c:e2:ae:bb:9a:ae:d4: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:59:E2:DE:26:32:01:B8:2D:77:D5:2A:A9:4E:FE:FF:50:C0:34 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c4:ec:03:53:e2:4c:bf:29:f0:ca:5f:c1:ae:51:8b:1c:90: b9:80:68:16:9a:c3:c8:fc:ad:72:46:1e:82:f1:da:8f:fd:f7: 5b:8b:5b:ac:09:47:e6:fb:8e:10:94:17:5a:e0:b5:48:38:25: c3:a3:44:79:b1:b2:1f:ce:14:b8:38:95:67:37:8e:9c:e4:44: 40:89:dd:54:94:d6:75:59:ea:fc:54:c1:73:bf:11:63:51:c2: 0f:18:0d:e5:cb:eb:65:ff:74:4a:00:2e:78:61:82:a4:ca:3f: 7b:30:e8:f3:83:7d:78:75:b5:fe:26:22:7e:07:3c:a1:06:5c: c3:6a:4e:31:9e:9f:3d:f0:a2:ec:0d:bc:6d:54:15:dd:4d:63: ec:c9:df:4b:53:dc:34:05:31:d5:2a:ee:f2:5b:02:64:0d:5c: 2a:66:2c:f1:c8:15:81:cc:c0:f0:f4:92:c4:10:2e:d6:29:ac: 57:c0:6f:c0:98:a0:9e:3c:33:2e:ef:df:41:e3:44:38:3e:96: 33:63:63:1d:de:d8:33:e1:e7:68:f9:f3:a0:0f:b7:4d:9a:3a: 23:a1:d3:9a:f5:c4:38:e0:e2:9f:07:0e:bb:8b:8a:ef:d1:7f: 12:1a:ce:07:91:6a:43:12:d0:72:59:03:a6:f5:df:7a:03:9d: d0:cb:ba:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcyESKeZTr6d9fwtNHEGsjxqTb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNjAzMDUyMTM2NTVaFw0yNjAzMDgyMzAyNTVaMDMxMTAvBgNV BAMTKDM0RDE1OUUyREUyNjMyMDFCODJENzdENTJBQTk0RUZFRkY1MEMwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5X5MCFfUI3G6RJDcEES+ZvR3 QGmlE3dGidZezUv0b3BZ9auamiDSnLLNQiq7OAXavMmHMkMAmEi6Ww0qzEFGPX2S fGroM642W9B3HaZ9UNdElAd2aQlck6yXvwWXSi0m8yKC4K1ENpSOURIyRIOQJZJD I0vWYXUM9SpWYJirpOaftfRJ7jBaetnPrzBHOzq62xiQDEbLzBPujD3MxGRtVOhI 1Xj+KMJRO5x4oJBfrMHjZV9DYlovW781VV+z8HKexWz09tuznP6XnouPddLCFm7N dhBGyukPq43kpvvJzeQwp/jOER2lqvQCqBwsREhIQMrIP7g2bOKuu5qu1NBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNFZ4t4mMgG4LXfVKqlO/v9QwDQwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7E7ANT4ky/KfDKX8GuUYsckLmAaBaaw8j8 rXJGHoLx2o/991uLW6wJR+b7jhCUF1rgtUg4JcOjRHmxsh/OFLg4lWc3jpzkRECJ 3VSU1nVZ6vxUwXO/EWNRwg8YDeXL62X/dEoALnhhgqTKP3sw6PODfXh1tf4mIn4H PKEGXMNqTjGenz3wouwNvG1UFd1NY+zJ30tT3DQFMdUq7vJbAmQNXCpmLPHIFYHM wPD0ksQQLtYprFfAb8CYoJ48My7v30HjRDg+ljNjYx3e2DPh52j586APt02aOiOh 05r1xDjg4p8HDruLiu/RfxIazgeRakMS0HJZA6b133oDndDLuug= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client